MCP.Market

U.CASH Pay MCP server

online · 100% uptime
by u.cash·cash.u/ucash-pay·v0.10.0

Pay x402 resources on U.CASH from your own wallet: view the price, pay on-chain, settle by hash.

B81/100grade B
What users say
No reviews yet
Be the first
Safety scan
B81/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed U.CASH Pay yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

U.CASH Pay tools (14, 3 write)

write = sends, deletes, buys or posts
  • uxc_cancel_checkoutwrite actionFree

    Cancel a UCP checkout session. No key; pass cloud for a hosted merchant.

  • uxc_complete_checkoutFree

    Mint payment challenges for a checkout session -> ready_for_complete. Optional ap2 (AP2 checkout mandate). No key; pass cloud for a hosted merchant.

  • uxc_create_checkoutwrite actionFree

    Create a UCP checkout session (multi-item, mixed-currency cart) for a merchant catalog. No key. Returns {id, status, currency, line_items, totals, ap2}.

  • uxc_discover_serversFree

    List every u.cash MCP server in the fleet (buyer, seller, prime, legacy): product surface, auth model, transports with install coordinates, docs URL. Optional q filters by name/product/summary. Discovery only - connect to each server directly with your own credentials; no call is ever proxied.

  • uxc_discover_toolsFree

    Search tools across every u.cash MCP server by name or description (case-insensitive substring), optionally scoped to one server. Returns the tool, a one-liner, its server, and how to connect. Discovery only - connect to that server directly; no call is ever proxied.

  • uxc_get_checkoutFree

    Fetch a UCP checkout session by id (status: incomplete -> ready_for_complete -> completed). No key; pass cloud for a hosted merchant.

  • uxc_get_marketFree

    The PUBLIC cross-merchant market catalog: every published checkout across merchants (id, title, price, currency, merchant, domain, payable url). No key. q filters by title/merchant/description.

  • uxc_get_orderwrite actionFree

    View a UCP checkout session as an order (per-item fulfillment status + fulfillment events). No key; pass cloud for a hosted merchant.

  • uxc_get_productFree

    Fetch a single catalog product by id. Public (no key); pair with uxc_search_catalog to find ids.

  • uxc_get_servicesFree

    The PUBLIC cross-provider services catalog (eSend rail: each row carries the provider contact email, a sendable asset code and a price). No key.

  • uxc_lookup_productsFree

    Batch catalog lookup by ids. Public (no key).

  • uxc_search_catalogFree

    Search a merchant catalog (text query + price filters + pagination). The merchant is resolved from a cloud token (the "cloud" argument) or the platform default. No key.

  • uxc_verify_paymentFree

    BUYER-SIDE. After paying a resource (from uxc_view_door) on-chain from your own wallet, submit the transaction hash to settle it. Pass the challengeId from the accepts[] entry you paid and the on-chain transaction hash. Returns settled (confirmed) or pending (awaiting confirmations). No seller key needed - the challengeId identifies the resource, and settlement is gated by on-chain confirmation.

  • uxc_view_doorFree

    Fetch the public 402 payment door for a resource (what a buyer sees at https://agents.u.cash/r/{res_id}): the price + the multi-coin accepts[] (each asset, the seller receive address, and the exact amount to pay). No key. Use as a BUYER to see what to pay, then uxc_verify_payment after paying. status=true polls settlement without minting a new challenge.

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1153ms20/20
  • Tool poisoning14 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenancelast push 13 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 81/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How U.CASH Pay compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
81/100
higher than 62% of 48,255 servers
Tools
14
the typical server has 7
Tools that change things
21%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
308 ms
faster than 47% of 30,031 servers

What its tools let an agent do: 11 read · 3 change

Install U.CASH Pay in Claude Code, Cursor or VS Code

claude mcp add --transport http ucash-pay https://mcp.u.cash/
Add to Cursor

What the publisher says

From the U.CASH Pay repository's README, as published. We do not edit it. Read it on GitHub

mcp-ucash

<!-- mcp-name: io.github.UdotCASH/mcp-ucash -->

A merchant-side MCP server for U.CASH Pay. Let Claude Desktop, Cursor, or any MCP client manage a merchant's pay.u.cash: create checkouts, verify settlement webhooks, and read settings + integration credentials.

Tools

  • createcheckout(amount, currency, title, externalreference) → hosted checkout URL + transaction id
  • verifywebhook(rawbody, signature_header) → HMAC verify an X-Webhook-Signature
  • get_integrations() → Discord/Telegram/BigCommerce/Ecwid/Wix credentials (from /v1/integrations)
  • get_settings() → safe agent settings (from /v1/settings)

Run

# one-liner: uv installs an isolated Python 3.10+ and the deps for you
uvx --from mcp-ucash python -m mcp_ucash

Or from source:

pip install "mcp[cli]"
export UXC_API_KEY=uxc_...          # agent API key, for /v1/* reads
export UCASH_CLOUD_TOKEN=st_...     # store cloud token, for create_checkout
export UCASH_WEBHOOK_SECRET=...     # for verify_webhook
python mcp_ucash.py

Claude Desktop / Cursor config

{
  "mcpServers": {
    "ucash": {
      "command": "uvx",
      "args": ["--from", "mcp-ucash", "python", "-m", "mcp_ucash"],
      "env": {
        "UXC_API_KEY": "uxc_...",
        "UCASH_CLOUD_TOKEN": "st_...",
        "UCASH_WEBHOOK_SECRET": "..."
      }
    }
  }
}

MCP directories

This repo ships the manifests the MCP directories read:

  • mcp.json - client/registry descriptor (Glama, MCP Registry).
  • smithery.yaml - build + start spec for Smithery.

License

MIT.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-10-16restoreD → Bscore 81: Write-action tools reachable without authentication
  • 2026-10-16downgradeB → Dscore 47: Remote endpoint did not respond

U.CASH Pay: common questions

Is U.CASH Pay MCP server safe?
Mostly: it is graded B (81/100). Read the U.CASH Pay safety report
How do I install U.CASH Pay?
It runs remotely at mcp.u.cash. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does U.CASH Pay need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is U.CASH Pay maintained?
The last commit was 31 days ago (2026-10-04). The latest release is v0.10.0.
Is U.CASH Pay up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does U.CASH Pay compare with other MCP servers?
safety score 81/100 (higher than 62% of 48,255 servers); tools 14 (the typical server has 7); tools that change things 21% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.